013_Encrypting Data - CompTIA Security+ SY0-701 - 1.4

Which of the following is a method of file-level encryption in Windows? BitLocker, FileVault, EFS (Encrypting File System), IPsec

• BitLocker

• FileVault

• EFS (Encrypting File System)

• IPsec

What is the role of a VPN in data in transit encryption?

• To create an encrypted tunnel for secure communication between sites or remote users.

• To provide a direct connection to the internet without any security measures.

• To enhance the speed of data transmission without encryption.

• To allow unrestricted access to all websites without any restrictions.

Explain how column-level encryption can improve database performance compared to full database encryption.

• It encrypts all data in the database, ensuring maximum security.

• It encrypts only sensitive columns, allowing non-sensitive data to remain in plain text for faster searches.

• It requires more processing power, slowing down database operations.

• It eliminates the need for any encryption, improving performance significantly.

What is the main advantage of using AES over DES?

• AES is slower but more secure.

• AES uses a smaller key size.

• AES supports multiple versions for varied security levels.

• AES is a symmetric key algorithm.

How does algorithm transparency contribute to the robustness of encryption techniques?

• By allowing public scrutiny and trust in the algorithm's security.

• By making the algorithm more complex and difficult to understand.

• By limiting access to the algorithm to only a few experts.

• By ensuring that the algorithm is kept secret from potential attackers.

Why is the secrecy of the encryption key more important than the secrecy of the algorithm?

• Because knowing the algorithm allows anyone to decrypt the data.

• Because the algorithm is always kept secret from the public.

• Because knowing the algorithm does not grant access without the correct key.

• Because the key can be easily changed while the algorithm cannot.

Propose a method to enhance the security of a database containing sensitive information.

• Use full disk encryption for the server.

• Implement column-level encryption for sensitive data.

• Use a VPN for all database connections.

• Store all data in plain text for easy access.

Describe a scenario where file-level encryption would be more appropriate than full disk encryption.

• When only specific files or folders need to be encrypted for security.

• When the entire hard drive needs protection from unauthorized access.

• When data is being transferred over a network.

• When a user wants to encrypt their operating system.

What is the primary purpose of data at rest encryption?

• To encrypt data stored on devices such as SSDs and hard drives.

• To protect data during transmission over networks.

• To ensure data is backed up in the cloud securely.

• To delete unnecessary files from storage devices.

Analyze the impact of processing power on the required key length for encryption.

• As processing power increases, longer keys may be required for continued security.

• Increased processing power allows for shorter keys without compromising security.

• Processing power has no effect on key length requirements for encryption.

• Longer keys are only necessary when using outdated processing technology.